Skip to main content
版本:v1.8

内置运维特征列表

本文档将按字典序展示所有内置运维特征的参数列表。

本文档由脚本自动生成,请勿手动修改,上次更新于 2023-01-16T19:19:03+08:00。

Affinity

描述

为 pod 添加 affinity 和 toleration,它遵循路径“spec.template”中的 pod 规范。

目前这个运维特征默认在 VelaUX 处隐藏,你可以在 CLI 侧使用。

适用于组件类型

基于以下资源的组件:

  • deployments.apps
  • statefulsets.apps
  • daemonsets.apps
  • jobs.batch

示例 (affinity)

apiVersion: core.oam.dev/v1beta1
kind: Application
metadata:
name: busybox
spec:
components:
- name: busybox
type: webservice
properties:
image: busybox
cmd: ["sleep", "86400"]
labels:
label-key: label-value
to-delete-label-key: to-delete-label-value
traits:
- type: affinity
properties:
podAffinity:
preferred:
- weight: 1
podAffinityTerm:
labelSelector:
matchExpressions:
- key: "secrity"
values: ["S1"]
namespaces: ["default"]
topologyKey: "kubernetes.io/hostname"

参数说明 (affinity)

名称描述类型是否必须默认值
podAffinity指定 pod 的亲和性调度规则。podAffinityfalse
podAntiAffinity指定 pod 的反亲和性调度规则。podAntiAffinityfalse
nodeAffinity指定 pod 的节点亲和性调度规则。nodeAffinityfalse
tolerationsSpecify tolerant taint。[]tolerationsfalse

podAffinity (affinity)

名称描述类型是否必须默认值
required指定 requiredDuringSchedulingIgnoredDuringExecution 字段,只有规则被满足时才执行调度。[]requiredfalse
preferred指定 preferredDuringSchedulingIgnoredDuringExecution 字段,调度器会尝试寻找满足对应规则的节点。如果找不到匹配的节点,调度器仍然会调度该 Pod。[]preferredfalse
required (affinity)
名称描述类型是否必须默认值
labelSelectorlabelSelectorfalse
namespaces[]stringfalse
topologyKeystringtrue
namespaceSelectornamespaceSelectorfalse
labelSelector (affinity)
名称描述类型是否必须默认值
matchLabelsmap[string]stringfalse
matchExpressions[]matchExpressionsfalse
matchExpressions (affinity)
名称描述类型是否必须默认值
keystringtrue
operator"In" or "NotIn" or "Exists" or "DoesNotExist"falseIn
values[]stringfalse
namespaceSelector (affinity)
名称描述类型是否必须默认值
matchLabelsmap[string]stringfalse
matchExpressions[]matchExpressionsfalse
matchExpressions (affinity)
名称描述类型是否必须默认值
keystringtrue
operator"In" or "NotIn" or "Exists" or "DoesNotExist"falseIn
values[]stringfalse
preferred (affinity)
名称描述类型是否必须默认值
weight指定对应 podAffinityTerm 的权重。inttrue
podAffinityTerm指定一组 pod。podAffinityTermtrue
podAffinityTerm (affinity)
名称描述类型是否必须默认值
labelSelectorlabelSelectorfalse
namespaces[]stringfalse
topologyKeystringtrue
namespaceSelectornamespaceSelectorfalse
labelSelector (affinity)
名称描述类型是否必须默认值
matchLabelsmap[string]stringfalse
matchExpressions[]matchExpressionsfalse
matchExpressions (affinity)
名称描述类型是否必须默认值
keystringtrue
operator"In" or "NotIn" or "Exists" or "DoesNotExist"falseIn
values[]stringfalse
namespaceSelector (affinity)
名称描述类型是否必须默认值
matchLabelsmap[string]stringfalse
matchExpressions[]matchExpressionsfalse
matchExpressions (affinity)
名称描述类型是否必须默认值
keystringtrue
operator"In" or "NotIn" or "Exists" or "DoesNotExist"falseIn
values[]stringfalse

podAntiAffinity (affinity)

名称描述类型是否必须默认值
required指定 requiredDuringSchedulingIgnoredDuringExecution 字段,只有规则被满足时才执行调度。[]requiredfalse
preferred指定 preferredDuringSchedulingIgnoredDuringExecution 字段,调度器会尝试寻找满足对应规则的节点。如果找不到匹配的节点,调度器仍然会调度该 Pod。[]preferredfalse
required (affinity)
名称描述类型是否必须默认值
labelSelectorlabelSelectorfalse
namespaces[]stringfalse
topologyKeystringtrue
namespaceSelectornamespaceSelectorfalse
labelSelector (affinity)
名称描述类型是否必须默认值
matchLabelsmap[string]stringfalse
matchExpressions[]matchExpressionsfalse
matchExpressions (affinity)
名称描述类型是否必须默认值
keystringtrue
operator"In" or "NotIn" or "Exists" or "DoesNotExist"falseIn
values[]stringfalse
namespaceSelector (affinity)
名称描述类型是否必须默认值
matchLabelsmap[string]stringfalse
matchExpressions[]matchExpressionsfalse
matchExpressions (affinity)
名称描述类型是否必须默认值
keystringtrue
operator"In" or "NotIn" or "Exists" or "DoesNotExist"falseIn
values[]stringfalse
preferred (affinity)
名称描述类型是否必须默认值
weight指定对应 podAffinityTerm 的权重。inttrue
podAffinityTerm指定一组 pod。podAffinityTermtrue
podAffinityTerm (affinity)
名称描述类型是否必须默认值
labelSelectorlabelSelectorfalse
namespaces[]stringfalse
topologyKeystringtrue
namespaceSelectornamespaceSelectorfalse
labelSelector (affinity)
名称描述类型是否必须默认值
matchLabelsmap[string]stringfalse
matchExpressions[]matchExpressionsfalse
matchExpressions (affinity)
名称描述类型是否必须默认值
keystringtrue
operator"In" or "NotIn" or "Exists" or "DoesNotExist"falseIn
values[]stringfalse
namespaceSelector (affinity)
名称描述类型是否必须默认值
matchLabelsmap[string]stringfalse
matchExpressions[]matchExpressionsfalse
matchExpressions (affinity)
名称描述类型是否必须默认值
keystringtrue
operator"In" or "NotIn" or "Exists" or "DoesNotExist"falseIn
values[]stringfalse

nodeAffinity (affinity)

名称描述类型是否必须默认值
required指定 requiredDuringSchedulingIgnoredDuringExecution 字段,只有规则被满足时才执行调度。requiredfalse
preferred指定 preferredDuringSchedulingIgnoredDuringExecution 字段,调度器会尝试寻找满足对应规则的节点。如果找不到匹配的节点,调度器仍然会调度该 Pod。[]preferredfalse
required (affinity)
名称描述类型是否必须默认值
nodeSelectorTerms指定一组节点选择器。[]nodeSelectorTermstrue
nodeSelectorTerms (affinity)
名称描述类型是否必须默认值
matchExpressions[]matchExpressionsfalse
matchFields[]matchFieldsfalse
matchExpressions (affinity)
名称描述类型是否必须默认值
keystringtrue
operator"In" or "NotIn" or "Exists" or "DoesNotExist" or "Gt" or "Lt"falseIn
values[]stringfalse
matchFields (affinity)
名称描述类型是否必须默认值
keystringtrue
operator"In" or "NotIn" or "Exists" or "DoesNotExist" or "Gt" or "Lt"falseIn
values[]stringfalse
preferred (affinity)
名称描述类型是否必须默认值
weightSpecify weight associated with matching the corresponding nodeSelector。inttrue
preferenceSpecify a node selector。preferencetrue
preference (affinity)
名称描述类型是否必须默认值
matchExpressions[]matchExpressionsfalse
matchFields[]matchFieldsfalse
matchExpressions (affinity)
名称描述类型是否必须默认值
keystringtrue
operator"In" or "NotIn" or "Exists" or "DoesNotExist" or "Gt" or "Lt"falseIn
values[]stringfalse
matchFields (affinity)
名称描述类型是否必须默认值
keystringtrue
operator"In" or "NotIn" or "Exists" or "DoesNotExist" or "Gt" or "Lt"falseIn
values[]stringfalse

tolerations (affinity)

名称描述类型是否必须默认值
keystringfalse
operator"Equal" or "Exists"falseEqual
valuestringfalse
effect"NoSchedule" or "PreferNoSchedule" or "NoExecute"false
tolerationSeconds指定 toleration 的时间周期。intfalse

Annotations

描述

Add annotations on your workload. if it generates pod, add same annotations for generated pods。

适用于组件类型

所有组件类型。

示例 (annotations)

apiVersion: core.oam.dev/v1beta1
kind: Application
metadata:
name: myapp
spec:
components:
- name: express-server
type: webservice
properties:
image: crccheck/hello-world
port: 8000
traits:
- type: labels
properties:
"release": "stable"
- type: annotations
properties:
"description": "web application"

参数说明 (annotations)

名称描述类型是否必须默认值
-map[string]:(null|string)true

Command

描述

为 pod 添加命令,它遵循路径“spec.template”中的 pod 规范。

适用于组件类型

基于以下资源的组件:

  • deployments.apps
  • statefulsets.apps
  • daemonsets.apps
  • jobs.batch

示例 (command)

apiVersion: core.oam.dev/v1beta1
kind: Application
metadata:
name: busybox
spec:
components:
- name: busybox
type: webservice
properties:
image: busybox
cmd: ["sleep", "86400"]
traits:
- type: sidecar
properties:
name: sidecar-nginx
image: nginx
- type: command
properties:
# you can use command to control multiple containers by filling `containers`
# NOTE: in containers, you must set the container name for each container
containers:
- containerName: busybox
command: ["sleep", "8640000"]
- containerName: sidecar-nginx
args: ["-q"]

参数说明 (command)

名称描述类型是否必须默认值
PatchParams or type-option-2false

PatchParams (command)

名称描述类型是否必须默认值
containerNameSpecify the name of the target container, if not set, use the component name。stringfalseempty
commandSpecify the command to use in the target container, if not set, it will not be changed。nulltrue
argsSpecify the args to use in the target container, if set, it will override existing args。nulltrue
addArgsSpecify the args to add in the target container, existing args will be kept, cannot be used with argsnulltrue
delArgsSpecify the existing args to delete in the target container, cannot be used with argsnulltrue

type-option-2 (command)

名称描述类型是否必须默认值
containersSpecify the commands for multiple containers。[]containerstrue
containers (command)
名称描述类型是否必须默认值
containerNameSpecify the name of the target container, if not set, use the component name。stringfalseempty
commandSpecify the command to use in the target container, if not set, it will not be changed。nulltrue
argsSpecify the args to use in the target container, if set, it will override existing args。nulltrue
addArgsSpecify the args to add in the target container, existing args will be kept, cannot be used with argsnulltrue
delArgsSpecify the existing args to delete in the target container, cannot be used with argsnulltrue

Container-Image

描述

Set the image of the container。

适用于组件类型

基于以下资源的组件:

  • deployments.apps
  • statefulsets.apps
  • daemonsets.apps
  • jobs.batch

示例 (container-image)

apiVersion: core.oam.dev/v1beta1
kind: Application
metadata:
name: busybox
spec:
components:
- name: busybox
type: webservice
properties:
image: busybox
cmd: ["sleep", "86400"]
traits:
- type: sidecar
properties:
name: sidecar-nginx
image: nginx
- type: container-image
properties:
# you can use container-image to control multiple containers by filling `containers`
# NOTE: in containers, you must set the container name for each container
containers:
- containerName: busybox
image: busybox-1.34.0
imagePullPolicy: IfNotPresent
- containerName: sidecar-nginx
image: nginx-1.20

参数说明 (container-image)

名称描述类型是否必须默认值
PatchParams or type-option-2false

PatchParams (container-image)

名称描述类型是否必须默认值
containerNameSpecify the name of the target container, if not set, use the component name。stringfalseempty
imageSpecify the image of the container。stringtrue
imagePullPolicySpecify the image pull policy of the container。"" or "IfNotPresent" or "Always" or "Never"falseempty

type-option-2 (container-image)

名称描述类型是否必须默认值
containersSpecify the container image for multiple containers。[]containerstrue
containers (container-image)
名称描述类型是否必须默认值
containerNameSpecify the name of the target container, if not set, use the component name。stringfalseempty
imageSpecify the image of the container。stringtrue
imagePullPolicySpecify the image pull policy of the container。"" or "IfNotPresent" or "Always" or "Never"falseempty

Cpuscaler

描述

Automatically scale the component based on CPU usage。

适用于组件类型

基于以下资源的组件:

  • deployments.apps
  • statefulsets.apps

示例 (cpuscaler)

apiVersion: core.oam.dev/v1beta1
kind: Application
metadata:
name: website
spec:
components:
- name: frontend
type: webservice
properties:
image: nginx
traits:
- type: cpuscaler
properties:
min: 1
max: 10
cpuUtil: 60

参数说明 (cpuscaler)

名称描述类型是否必须默认值
min能够将工作负载缩容到的最小副本个数。intfalse1
max能够将工作负载扩容到的最大副本个数。intfalse10
cpuUtil每个容器的平均 CPU 利用率 例如, 50 意味者 CPU 利用率为 50%。intfalse50
targetAPIVersionSpecify the apiVersion of scale target。stringfalseapps/v1
targetKindSpecify the kind of scale target。stringfalseDeployment

Env

描述

Add env on K8s pod for your workload which follows the pod spec in path 'spec.template'。

适用于组件类型

基于以下资源的组件:

  • deployments.apps
  • statefulsets.apps
  • daemonsets.apps
  • jobs.batch

示例 (env)

apiVersion: core.oam.dev/v1beta1
kind: Application
metadata:
name: busybox
spec:
components:
- name: busybox
type: webservice
properties:
image: busybox
cmd: ["sleep", "86400"]
traits:
- type: sidecar
properties:
name: sidecar-nginx
image: nginx
- type: env
properties:
# you can use env to control multiple containers by filling `containers`
# NOTE: in containers, you must set the container name for each container
containers:
- containerName: busybox
env:
key_for_busybox_first: value_first
key_for_busybox_second: value_second
- containerName: sidecar-nginx
env:
key_for_nginx_first: value_first
key_for_nginx_second: value_second
apiVersion: core.oam.dev/v1beta1
kind: Application
metadata:
name: busybox
spec:
components:
- name: busybox
type: webservice
properties:
image: busybox
cmd: ["sleep", "86400"]
traits:
- type: sidecar
properties:
name: sidecar-nginx
image: nginx
- type: env
properties:
# you can use env to control one container, if containerName not specified, it will patch on the first index container
containerName: busybox
env:
key_for_busybox_first: value_first
key_for_busybox_second: value_second

参数说明 (env)

名称描述类型是否必须默认值
PatchParams or type-option-2false

PatchParams (env)

名称描述类型是否必须默认值
containerNameSpecify the name of the target container, if not set, use the component name。stringfalseempty
replaceSpecify if replacing the whole environment settings for the container。boolfalsefalse
envSpecify the environment variables to merge, if key already existing, override its value。map[string]stringtrue
unsetSpecify which existing environment variables to unset。[]stringtrue

type-option-2 (env)

名称描述类型是否必须默认值
containersSpecify the environment variables for multiple containers。[]containerstrue
containers (env)
名称描述类型是否必须默认值
containerNameSpecify the name of the target container, if not set, use the component name。stringfalseempty
replaceSpecify if replacing the whole environment settings for the container。boolfalsefalse
envSpecify the environment variables to merge, if key already existing, override its value。map[string]stringtrue
unsetSpecify which existing environment variables to unset。[]stringtrue

Expose

描述

为组件暴露端口,以便能够通过 web 进行访问。

适用于组件类型

基于以下资源的组件:

  • deployments.apps
  • statefulsets.apps

示例 (expose)

apiVersion: core.oam.dev/v1beta1
kind: Application
metadata:
name: test-app
spec:
components:
- name: hello-world
type: webservice
properties:
image: crccheck/hello-world
traits:
- type: expose
properties:
port: [8000]

参数说明 (expose)

名称描述类型是否必须默认值
port指定要暴露的端口。[]inttrue
annotationsSpecify the annotaions of the exposed service。map[string]stringtrue
type指定要创建的服务类型,可选值:"ClusterIP","NodePort","LoadBalancer","ExternalName"。"ClusterIP" or "NodePort" or "LoadBalancer" or "ExternalName"falseClusterIP

Gateway

描述

为组件启用公网访问,使用 K8s v1.20+ 的 Ingress API。

适用于组件类型

基于以下资源的组件:

  • deployments.apps
  • statefulsets.apps

示例 (gateway)

# vela-app.yaml
apiVersion: core.oam.dev/v1beta1
kind: Application
metadata:
name: first-vela-app
spec:
components:
- name: express-server
type: webservice
properties:
image: oamdev/hello-world
port: 8000
traits:
- type: gateway
properties:
domain: testsvc.example.com
http:
"/": 8000

参数说明 (gateway)

名称描述类型是否必须默认值
domain暴露服务所绑定的域名。stringfalse
http定义一组网关路径到 Pod 服务端口的映射关系。map[string]inttrue
class所使用的 kubernetes ingress class。stringfalsenginx
classInSpec在 kubernetes ingress 的 '.spec.ingressClassName' 定义 ingress class 而不是在 'kubernetes.io/ingress.class' 注解中定义。boolfalsefalse
secretNameSpecify the secret name you want to quote to use tls。stringfalse
gatewayHost指定 Ingress 网关的主机名,当为空时,会自动生成主机名。stringfalse

Hostalias

描述

Add host aliases on K8s pod for your workload which follows the pod spec in path 'spec.template'。

适用于组件类型

基于以下资源的组件:

  • deployments.apps
  • statefulsets.apps
  • daemonsets.apps
  • jobs.batch

示例 (hostalias)

apiVersion: core.oam.dev/v1beta1
kind: Application
metadata:
name: application-with-hostalias
spec:
components:
- name: busybox-runner
type: worker
properties:
image: busybox
cmd:
- sleep
- '1000'
traits:
- type: hostalias
properties:
hostAliases:
- ip: 127.0.0.1
hostnames:
- localname
- locals

参数说明 (hostalias)

名称描述类型是否必须默认值
hostAliases定义容器内的 hostAliases。[]hostAliasestrue

hostAliases (hostalias)

名称描述类型是否必须默认值
ipstringtrue
hostnames[]stringtrue

Hpa

描述

Configure k8s HPA for Deployment or Statefulsets。

适用于组件类型

基于以下资源的组件:

  • deployments.apps
  • statefulsets.apps

示例 (hpa)

apiVersion: core.oam.dev/v1beta1
kind: Application
metadata:
name: helloworld
spec:
components:
- name: helloworld
type: webservice
properties:
cpu: "0.5"
exposeType: ClusterIP
image: oamdev/hello-world
memory: 1024Mi
ports:
- expose: true
port: 80
protocol: TCP
traits:
- type: scaler
properties:
replicas: 1
- type: hpa
properties:
targetAPIVersion: apps/v1
targetKind: Deployment
max: 10
min: 1
cpu:
type: Utilization
value: 80
mem:
type: AverageValue
value: 90
podCustomMetrics:
# here are custom metric names and values. Please replace them to be your metrics
- name: pod_net_received_rate
value: "77"
- name: pod_net_transmitted_rate
value: "88"
- name: pod_net_received_packets_rate
value: "95"
- name: pod_net_transmitted_packets_rate
value: "99"
policies:
- name: apply-once
type: apply-once
properties:
enable: true
rules:
- strategy:
path: ["spec.replicas"]
selector:
resourceTypes: ["Deployment","StatefulSet"]

参数说明 (hpa)

名称描述类型是否必须默认值
min能够将工作负载缩容到的最小副本个数。intfalse1
max能够将工作负载扩容到的最大副本个数。intfalse10
targetAPIVersionSpecify the apiVersion of scale target。stringfalseapps/v1
targetKindSpecify the kind of scale target。stringfalseDeployment
cpucputrue
memmemfalse
podCustomMetricsSpecify custom metrics of pod type。[]podCustomMetricsfalse

cpu (hpa)

名称描述类型是否必须默认值
typeSpecify resource metrics in terms of percentage("Utilization") or direct value("AverageValue")。"Utilization" or "AverageValue"falseUtilization
valueSpecify the value of CPU utilization or averageValue。intfalse50

mem (hpa)

名称描述类型是否必须默认值
typeSpecify resource metrics in terms of percentage("Utilization") or direct value("AverageValue")。"Utilization" or "AverageValue"falseUtilization
valueSpecify the value of MEM utilization or averageValue。intfalse50

podCustomMetrics (hpa)

名称描述类型是否必须默认值
nameSpecify name of custom metrics。stringtrue
valueSpecify target value of custom metrics。stringtrue

Init-Container

描述

为 pod 添加初始化容器,并使用共享卷。

适用于组件类型

基于以下资源的组件:

  • deployments.apps
  • statefulsets.apps
  • daemonsets.apps
  • jobs.batch

示例 (init-container)

apiVersion: core.oam.dev/v1beta1
kind: Application
metadata:
name: busybox
spec:
components:
- name: busybox
type: webservice
properties:
image: busybox
cmd: ["sleep", "86400"]
traits:
- type: init-container
properties:
name: init-busybox
image: busybox
cmd: ["echo", "hello"]
initMountPath: /data
appMountPath: /data-initialized

参数说明 (init-container)

名称描述类型是否必须默认值
name指定初始化容器的名称。stringtrue
image指定初始化容器的镜像。stringtrue
imagePullPolicy镜像拉取策略。"IfNotPresent" or "Always" or "Never"falseIfNotPresent
cmd指定初始化容器的命令。[]stringfalse
args指定初始化容器的参数。[]stringfalse
env指定初始化容器的环境变量。[]envfalse
mountName指定共享卷的挂载名。stringfalseworkdir
appMountPath指定共享卷在应用容器的挂载路径。stringtrue
initMountPath指定共享卷初始化容器的挂载路径。stringtrue
extraVolumeMounts指定初始化容器的额外挂载卷。[]extraVolumeMountstrue

env (init-container)

名称描述类型是否必须默认值
name环境变量名称。stringtrue
value环境变量的值。stringfalse
valueFrom从哪个资源中读取环境变量的定义。valueFromfalse
valueFrom (init-container)
名称描述类型是否必须默认值
secretKeyRefsecret 键的引用。secretKeyReffalse
configMapKeyRefconfigmap 键的引用。configMapKeyReffalse
secretKeyRef (init-container)
名称描述类型是否必须默认值
nameSecret 名称。stringtrue
key选择 Secret 中存在的 key。stringtrue
configMapKeyRef (init-container)
名称描述类型是否必须默认值
name环境变量的名称。stringtrue
keyconfigmap 中的键名。stringtrue

extraVolumeMounts (init-container)

名称描述类型是否必须默认值
name挂载的卷名。stringtrue
mountPath初始化容器中的挂载路径。stringtrue

Json-Merge-Patch

描述

使用 JSON Merge Patch 策略,遵循 RFC 7396。

目前这个运维特征默认在 VelaUX 处隐藏,你可以在 CLI 侧使用。

适用于组件类型

所有组件类型。

示例 (json-merge-patch)

apiVersion: core.oam.dev/v1beta1
kind: Application
metadata:
name: busybox
spec:
components:
- name: busybox
type: webservice
properties:
image: busybox
cmd: ["sleep", "86400"]
labels:
pod-label-key: pod-label-value
to-delete-label-key: to-delete-label-value
traits:
# the json merge patch can be used to add, replace and delete fields
# the following part will
# 1. add `deploy-label-key` to deployment labels
# 2. set deployment replicas to 3
# 3. set `pod-label-key` to `pod-label-modified-value` in pod labels
# 4. delete `to-delete-label-key` in pod labels
# 5. reset `containers` for pod
- type: json-merge-patch
properties:
metadata:
labels:
deploy-label-key: deploy-label-added-value
spec:
replicas: 3
template:
metadata:
labels:
pod-label-key: pod-label-modified-value
to-delete-label-key: null
spec:
containers:
- name: busybox-new
image: busybox:1.34
command: ["sleep", "864000"]

参数说明 (json-merge-patch)

名称描述类型是否必须默认值
-{}true

Json-Patch

描述

使用 JSON Patch 策略,遵循 RFC 6902。

目前这个运维特征默认在 VelaUX 处隐藏,你可以在 CLI 侧使用。

适用于组件类型

所有组件类型。

示例 (json-patch)

apiVersion: core.oam.dev/v1beta1
kind: Application
metadata:
name: busybox
spec:
components:
- name: busybox
type: webservice
properties:
image: busybox
cmd: ["sleep", "86400"]
labels:
pod-label-key: pod-label-value
to-delete-label-key: to-delete-label-value
traits:
# the json patch can be used to add, replace and delete fields
# the following part will
# 1. add `deploy-label-key` to deployment labels
# 2. set deployment replicas to 3
# 3. set `pod-label-key` to `pod-label-modified-value` in pod labels
# 4. delete `to-delete-label-key` in pod labels
# 5. add sidecar container for pod
- type: json-patch
properties:
operations:
- op: add
path: "/spec/replicas"
value: 3
- op: replace
path: "/spec/template/metadata/labels/pod-label-key"
value: pod-label-modified-value
- op: remove
path: "/spec/template/metadata/labels/to-delete-label-key"
- op: add
path: "/spec/template/spec/containers/1"
value:
name: busybox-sidecar
image: busybox:1.34
command: ["sleep", "864000"]

参数说明 (json-patch)

名称描述类型是否必须默认值
operations[]operationstrue

operations (json-patch)

名称描述类型是否必须默认值
-{}true

K8s-Update-Strategy

描述

Set k8s update strategy for Deployment/DaemonSet/StatefulSet。

适用于组件类型

基于以下资源的组件:

  • deployments.apps
  • statefulsets.apps
  • daemonsets.apps

示例 (k8s-update-strategy)

apiVersion: core.oam.dev/v1beta1
kind: Application
metadata:
name: application-with-update-strategy
spec:
components:
- name: helloworld
type: webservice
properties:
cpu: "0.5"
exposeType: ClusterIP
image: oamdev/hello-world:latest
memory: 1024Mi
ports:
- expose: true
port: 80
protocol: TCP
traits:
- type: scaler
properties:
replicas: 5
- type: k8s-update-strategy
properties:
targetAPIVersion: apps/v1
targetKind: Deployment
strategy:
type: RollingUpdate
rollingStrategy:
maxSurge: 20%
maxUnavailable: 30%
---
apiVersion: core.oam.dev/v1beta1
kind: Application
metadata:
name: application-node-exporter
spec:
components:
- name: node-exporter
type: daemon
properties:
image: prom/node-exporter
imagePullPolicy: IfNotPresent
volumeMounts:
hostPath:
- mountPath: /host/sys
mountPropagation: HostToContainer
name: sys
path: /sys
readOnly: true
- mountPath: /host/root
mountPropagation: HostToContainer
name: root
path: /
readOnly: true
traits:
- properties:
args:
- --path.sysfs=/host/sys
- --path.rootfs=/host/root
- --no-collector.wifi
- --no-collector.hwmon
- --collector.filesystem.ignored-mount-points=^/(dev|proc|sys|var/lib/docker/.+|var/lib/kubelet/pods/.+)($|/)
- --collector.netclass.ignored-devices=^(veth.*)$
type: command
- properties:
annotations:
prometheus.io/path: /metrics
prometheus.io/port: "8080"
prometheus.io/scrape: "true"
port:
- 9100
type: expose
- properties:
cpu: 0.1
memory: 250Mi
type: resource
- type: k8s-update-strategy
properties:
targetAPIVersion: apps/v1
targetKind: DaemonSet
strategy:
type: RollingUpdate
rollingStrategy:
maxSurge: 20%
maxUnavailable: 30%




参数说明 (k8s-update-strategy)

名称描述类型是否必须默认值
targetAPIVersionSpecify the apiVersion of target。stringfalseapps/v1
targetKindSpecify the kind of target。"Deployment" or "StatefulSet" or "DaemonSet"falseDeployment
strategySpecify the strategy of update。strategytrue

strategy (k8s-update-strategy)

名称描述类型是否必须默认值
typeSpecify the strategy type。"RollingUpdate" or "Recreate" or "OnDelete"falseRollingUpdate
rollingStrategySpecify the parameters of rollong update strategy。rollingStrategyfalse
rollingStrategy (k8s-update-strategy)
名称描述类型是否必须默认值
maxSurgestringfalse25%
maxUnavailablestringfalse25%
partitionintfalse0

Labels

描述

Add labels on your workload. if it generates pod, add same label for generated pods。

适用于组件类型

所有组件类型。

示例 (labels)

apiVersion: core.oam.dev/v1beta1
kind: Application
metadata:
name: myapp
spec:
components:
- name: express-server
type: webservice
properties:
image: crccheck/hello-world
port: 8000
traits:
- type: labels
properties:
"release": "stable"
- type: annotations
properties:
"description": "web application"

参数说明 (labels)

名称描述类型是否必须默认值
-map[string]:(null|string)true

Lifecycle

描述

为 pod 添加生命周期钩子,它遵循路径“spec.template”中的 pod 规范。

适用于组件类型

基于以下资源的组件:

  • deployments.apps
  • statefulsets.apps
  • daemonsets.apps
  • jobs.batch

示例 (lifecycle)

apiVersion: core.oam.dev/v1beta1
kind: Application
metadata:
name: application-with-lifecycle
spec:
components:
- name: busybox-runner
type: worker
properties:
image: busybox
cmd:
- sleep
- '1000'
traits:
- type: lifecycle
properties:
postStart:
exec:
command:
- echo
- 'hello world'
preStop:
httpGet:
host: "www.aliyun.com"
scheme: "HTTPS"
port: 443

参数说明 (lifecycle)

名称描述类型是否必须默认值
postStartpostStartfalse
preStoppreStopfalse

postStart (lifecycle)

名称描述类型是否必须默认值
execexecfalse
httpGethttpGetfalse
tcpSockettcpSocketfalse
exec (lifecycle)
名称描述类型是否必须默认值
command[]stringtrue
httpGet (lifecycle)
名称描述类型是否必须默认值
pathstringfalse
portinttrue
hoststringfalse
scheme"HTTP" or "HTTPS"falseHTTP
httpHeaders[]httpHeadersfalse
httpHeaders (lifecycle)
名称描述类型是否必须默认值
namestringtrue
valuestringtrue
tcpSocket (lifecycle)
名称描述类型是否必须默认值
portinttrue
hoststringfalse

preStop (lifecycle)

名称描述类型是否必须默认值
execexecfalse
httpGethttpGetfalse
tcpSockettcpSocketfalse
exec (lifecycle)
名称描述类型是否必须默认值
command[]stringtrue
httpGet (lifecycle)
名称描述类型是否必须默认值
pathstringfalse
portinttrue
hoststringfalse
scheme"HTTP" or "HTTPS"falseHTTP
httpHeaders[]httpHeadersfalse
httpHeaders (lifecycle)
名称描述类型是否必须默认值
namestringtrue
valuestringtrue
tcpSocket (lifecycle)
名称描述类型是否必须默认值
portinttrue
hoststringfalse

Nocalhost

描述

使用 nocalhost 作为开发环境的配置。

目前这个运维特征默认在 VelaUX 处隐藏,你可以在 CLI 侧使用。

适用于组件类型

基于以下资源的组件:

  • deployments.apps
  • statefulsets.apps
  • daemonsets.apps
  • jobs.batch

示例 (nocalhost)

apiVersion: core.oam.dev/v1beta1
kind: Application
metadata:
name: bookinfo
spec:
components:
- name: productpage
type: webservice
properties:
image: nocalhost-docker.pkg.coding.net/nocalhost/bookinfo/productpage:latest
port: 9080
traits:
- type: nocalhost
properties:
port: 9080
gitUrl: https://github.com/nocalhost/bookinfo-productpage.git
image: nocalhost-docker.pkg.coding.net/nocalhost/dev-images/python:3.7.7-slim-productpage-with-pydevd
shell: "bash"
workDir: "/opt/work"
resources:
limits:
memory: 1Gi
cpu: "1"
requests:
memory: 512Mi
cpu: "0.5"
debug:
remoteDebugPort: 9009
hotReload: true
sync:
type: send
filePattern:
- ./
ignoreFilePattern:
- .git
- .idea
command:
run:
- sh
- run.sh
debug:
- sh
- debug.sh
env:
- name: "foo"
value: "bar"
portForward:
- 39080:9080

参数说明 (nocalhost)

名称描述类型是否必须默认值
portinttrue
serviceTypestringfalsedeployment
gitUrlstringfalse
imagestringtrue
shellstringfalsebash
workDirstringfalse/home/nocalhost-dev
storageClassstringfalse
commandcommandtrue
debugdebugfalse
hotReloadboolfalsetrue
syncsynctrue
env[]envfalse
portForward[]stringfalse
persistentVolumeDirs[]persistentVolumeDirsfalse
resourcesresourcestrue

command (nocalhost)

名称描述类型是否必须默认值
run[]stringtrue
debug[]stringtrue

debug (nocalhost)

名称描述类型是否必须默认值
remoteDebugPortintfalse

sync (nocalhost)

名称描述类型是否必须默认值
typestringfalsesend
filePattern[]stringtrue
ignoreFilePattern[]stringtrue

env (nocalhost)

名称描述类型是否必须默认值
namestringtrue
valuestringtrue

persistentVolumeDirs (nocalhost)

名称描述类型是否必须默认值
pathstringtrue
capacitystringtrue

resources (nocalhost)

名称描述类型是否必须默认值
limitslimitstrue
requestsrequeststrue
limits (nocalhost)
名称描述类型是否必须默认值
memorystringfalse2Gi
cpustringfalse2
requests (nocalhost)
名称描述类型是否必须默认值
memorystringfalse512Mi
cpustringfalse0.5

Resource

描述

为 pod 添加资源请求和限制,它遵循路径“spec.template”中的 pod 规范。

适用于组件类型

基于以下资源的组件:

  • deployments.apps
  • statefulsets.apps
  • daemonsets.apps
  • jobs.batch

示例 (resource)

apiVersion: core.oam.dev/v1beta1
kind: Application
metadata:
name: resource-app
spec:
components:
- name: express-server
type: webservice
properties:
image: crccheck/hello-world
ports:
- port: 8000
traits:
- type: resource
properties:
cpu: 2
memory: 2Gi
requests:
cpu: 2
memory: 2Gi
limits:
cpu: 4
memory: 4Gi

参数说明 (resource)

名称描述类型是否必须默认值
cpu指定 cpu 请求和限制的大小。numberfalse1
memory指定内存请求和限制的大小。stringfalse2048Mi
requests指定请求的资源。requestsfalse
limits指定限制的资源。limitsfalse

requests (resource)

名称描述类型是否必须默认值
cpu指定 cpu 请求的大小。numberfalse1
memory指定内存请求的大小。stringfalse2048Mi

limits (resource)

名称描述类型是否必须默认值
cpu指定 cpu 限制的大小。numberfalse1
memory指定内存限制的大小。stringfalse2048Mi

Scaler

描述

调整 pod 的副本数,它遵循路径“spec.template”中的 pod 规范。

适用于组件类型

基于以下资源的组件:

  • deployments.apps
  • statefulsets.apps

示例 (scaler)

apiVersion: core.oam.dev/v1beta1
kind: Application
metadata:
name: website
spec:
components:
- name: frontend
type: webservice
properties:
image: nginx
traits:
- type: scaler
properties:
replicas: 2
- type: sidecar
properties:
name: "sidecar-test"
image: "fluentd"
- name: backend
type: worker
properties:
image: busybox
cmd:
- sleep
- '1000'

参数说明 (scaler)

名称描述类型是否必须默认值
replicas工作负载的 Pod 个数。intfalse1

Service-Account

描述

为 pod 指定 serviceAccount,它遵循路径“spec.template”中的 pod 规范。

适用于组件类型

基于以下资源的组件:

  • deployments.apps
  • statefulsets.apps
  • daemonsets.apps
  • jobs.batch

示例 (service-account)

apiVersion: core.oam.dev/v1beta1
kind: Application
metadata:
name: vela-doc
namespace: vela-system
spec:
components:
- name: frontend
type: webservice
properties:
image: oamdev/vela-cli:v1.5.0-beta.1
cmd: ["/bin/vela","show"]
ports:
- port: 18081
expose: true
traits:
- type: service-account
properties:
name: kubevela-vela-core

参数说明 (service-account)

名称描述类型是否必须默认值
name指定 ServiceAccount 名称。stringtrue
create指定是否创建新的 ServiceAccount。boolfalsefalse
privileges指定 ServiceAccount 的权限,若不为空,则会创建 RoleBinding 及 ClusterRoleBindings。[]privilegesfalse

privileges (service-account)

名称描述类型是否必须默认值
verbs指定资源允许的动作。[]stringtrue
apiGroups指定资源的 apiGroups。[]stringfalse
resources指定允许的资源。[]stringfalse
resourceNames指定允许的资源名称。[]stringfalse
nonResourceURLs指定允许的资源 URL。[]stringfalse
scope指定权限的范围,默认为 namespace 范围。"namespace" or "cluster"falsenamespace

Service-Binding

描述

绑定云资源的密钥到组件环境变量中,该定义已废弃,请使用 'storage' 定义。

目前这个运维特征默认在 VelaUX 处隐藏,你可以在 CLI 侧使用。

适用于组件类型

基于以下资源的组件:

  • deployments.apps
  • statefulsets.apps
  • daemonsets.apps
  • jobs.batch

示例 (service-binding)

  1. Prepare a Kubernetes Secret

The secret can be manually created, or generated by other component or external system.

For example, we have a secret db-conn-example whose data is as below:

endpoint: https://xxx.com
password: 123
username: myname
  1. Bind the Secret into your component by service-binding trait

For example, we have a webservice component who needs to consume a database. The database connection string should be set to Pod environments: endpoint, username and DB_PASSWORD.

We can set the properties for envMappings as below. For each environment, secret represents the secret name, and key represents the key of the secret.

Here is the complete properties for the trait.

traits:
- type: service-binding
properties:
envMappings:
DB_PASSWORD:
secret: db-conn-example
key: password
endpoint:
secret: db-conn-example
key: endpoint
username:
secret: db-conn-example
key: username

In particular, if the environment name, like endpoint, is same to the key of the secret, we can omit the key. So we can simplify the properties as below.

traits:
- type: service-binding
properties:
envMappings:
DB_PASSWORD:
secret: db-conn-example
key: password
endpoint:
secret: db-conn-example
username:
secret: db-conn-example

We can finally prepare an Application for the business component binding-test-comp to consume the secret, which is a representative of a database cloud resource.

apiVersion: core.oam.dev/v1beta1
kind: Application
metadata:
name: webapp
spec:
components:
- name: binding-test-comp
type: webservice
properties:
image: zzxwill/flask-web-application:v0.3.1-crossplane
ports: 80
traits:
- type: service-binding
properties:
envMappings:
# environments refer to db-conn secret
DB_PASSWORD:
secret: db-conn-example
key: password
endpoint:
secret: db-conn-example
username:
secret: db-conn-example

Deploy this YAML and the Secret db-conn-example will be binding into environment of workload.

参数说明 (service-binding)

名称描述类型是否必须默认值
envMappings环境变量到密钥的映射。map[string]KeySecret(#keysecret-service-binding)true

KeySecret (service-binding)

名称描述类型是否必须默认值
keystringfalse
secretstringtrue

Sidecar

描述

为 pod 添加 sidecar 容器,它遵循路径“spec.template”中的 pod 规范。

适用于组件类型

基于以下资源的组件:

  • deployments.apps
  • statefulsets.apps
  • daemonsets.apps
  • jobs.batch

示例 (sidecar)

apiVersion: core.oam.dev/v1beta1
kind: Application
metadata:
name: vela-app-with-sidecar
spec:
components:
- name: log-gen-worker
type: worker
properties:
image: busybox
cmd:
- /bin/sh
- -c
- >
i=0;
while true;
do
echo "$i: $(date)" >> /var/log/date.log;
i=$((i+1));
sleep 1;
done
volumes:
- name: varlog
mountPath: /var/log
type: emptyDir
traits:
- type: sidecar
properties:
name: count-log
image: busybox
cmd: [ /bin/sh, -c, 'tail -n+1 -f /var/log/date.log']
volumes:
- name: varlog
path: /var/log

参数说明 (sidecar)

名称描述类型是否必须默认值
name容器名称。stringtrue
image容器镜像。stringtrue
cmd容器的执行命令。[]stringfalse
args指定 sidecar 中的参数。[]stringfalse
env指定 sidecar 中的环境变量。[]envfalse
volumes挂载卷。[]volumesfalse
livenessProbe判断容器是否存活的探针。livenessProbefalse
readinessProbe判断容器是否就绪,能够接受用户流量的探针。readinessProbefalse

env (sidecar)

名称描述类型是否必须默认值
name环境变量名称。stringtrue
value环境变量的值。stringfalse
valueFrom从哪个资源中读取环境变量的定义。valueFromfalse
valueFrom (sidecar)
名称描述类型是否必须默认值
secretKeyRefsecret 键的引用。secretKeyReffalse
configMapKeyRefconfigmap 键的引用。configMapKeyReffalse
fieldRef指定要用于环境变量的字段。fieldReffalse
secretKeyRef (sidecar)
名称描述类型是否必须默认值
nameSecret 名称。stringtrue
key选择 Secret 中存在的 key。stringtrue
configMapKeyRef (sidecar)
名称描述类型是否必须默认值
name环境变量的名称。stringtrue
keyconfigmap 中的键名。stringtrue
fieldRef (sidecar)
名称描述类型是否必须默认值
fieldPath指定要用于环境变量的字段路径。stringtrue

volumes (sidecar)

名称描述类型是否必须默认值
namestringtrue
pathstringtrue

livenessProbe (sidecar)

名称描述类型是否必须默认值
exec通过在容器中执行一条命令判断是否就绪。请注意就绪性检查必须并且也只能定义 httpGet,tcpSocket 或者 exec 中的一个。execfalse
httpGet通过发送 httpGet 请求判断容器是否就绪。 请注意就绪性检查必须并且也只能定义 httpGet,tcpSocket 或者 exec 中的一个。httpGetfalse
tcpSocket通过 tcpSocket 是否开启判断容器是否就绪。请注意就绪性检查必须并且也只能定义 httpGet,tcpSocket 或者 exec 中的一个。tcpSocketfalse
initialDelaySeconds定义容器启动多少秒之后开始第一次检查。intfalse0
periodSeconds定义每次检查之间的时间间隔。intfalse10
timeoutSeconds定义检查的超时时间。intfalse1
successThreshold定义检查成功多少次之后判断容器已经就绪。intfalse1
failureThreshold定义检查失败多少次之后判断容器已经不健康。intfalse3
exec (sidecar)
名称描述类型是否必须默认值
command容器中执行的命令,命令返回 0 则为正常,否则则为失败。[]stringtrue
httpGet (sidecar)
名称描述类型是否必须默认值
path定义服务端点请求的路径。stringtrue
port定义服务端点的端口号。inttrue
httpHeaders[]httpHeadersfalse
httpHeaders (sidecar)
名称描述类型是否必须默认值
namestringtrue
valuestringtrue
tcpSocket (sidecar)
名称描述类型是否必须默认值
port指定健康检查的 TCP socket。inttrue

readinessProbe (sidecar)

名称描述类型是否必须默认值
exec通过在容器中执行一条命令判断是否就绪。请注意就绪性检查必须并且也只能定义 httpGet,tcpSocket 或者 exec 中的一个。execfalse
httpGet通过发送 httpGet 请求判断容器是否就绪。 请注意就绪性检查必须并且也只能定义 httpGet,tcpSocket 或者 exec 中的一个。httpGetfalse
tcpSocket通过 tcpSocket 是否开启判断容器是否就绪。请注意就绪性检查必须并且也只能定义 httpGet,tcpSocket 或者 exec 中的一个。tcpSocketfalse
initialDelaySeconds定义容器启动多少秒之后开始第一次检查。intfalse0
periodSeconds定义每次检查之间的时间间隔。intfalse10
timeoutSeconds定义检查的超时时间。intfalse1
successThreshold定义检查成功多少次之后判断容器已经就绪。intfalse1
failureThreshold定义检查失败多少次之后判断容器已经不健康。intfalse3
exec (sidecar)
名称描述类型是否必须默认值
command容器中执行的命令,命令返回 0 则为正常,否则则为失败。[]stringtrue
httpGet (sidecar)
名称描述类型是否必须默认值
path定义服务端点请求的路径。stringtrue
port定义服务端点的端口号。inttrue
httpHeaders[]httpHeadersfalse
httpHeaders (sidecar)
名称描述类型是否必须默认值
namestringtrue
valuestringtrue
tcpSocket (sidecar)
名称描述类型是否必须默认值
port指定健康检查的 TCP socket。inttrue

Startup-Probe

描述

Add startup probe hooks for the specified container of K8s pod for your workload which follows the pod spec in path 'spec.template'。

适用于组件类型

基于以下资源的组件:

  • deployments.apps
  • statefulsets.apps
  • daemonsets.apps
  • jobs.batch

示例 (startup-probe)

apiVersion: core.oam.dev/v1beta1
kind: Application
metadata:
name: application-with-startup-probe
spec:
components:
- name: busybox-runner
type: worker
properties:
image: busybox
cmd:
- sleep
- '1000'
traits:
- type: sidecar
properties:
name: nginx
image: nginx
# This startup-probe is blocking the startup of the main container
# as the URL has a typo '.comm' vs '.com'
- type: startup-probe
properties:
containerName: "busybox-runner"
httpGet:
host: "www.guidewire.comm"
scheme: "HTTPS"
port: 443
periodSeconds: 4
failureThreshold: 4
# This startup probe targets the nginx sidecar
- type: startup-probe
properties:
containerName: nginx
httpGet:
host: "www.guidewire.com"
scheme: "HTTPS"
port: 443
periodSeconds: 5
failureThreshold: 5

参数说明 (startup-probe)

名称描述类型是否必须默认值
StartupProbeParams or type-option-2false

StartupProbeParams (startup-probe)

名称描述类型是否必须默认值
containerNameSpecify the name of the target container, if not set, use the component name。stringfalseempty
initialDelaySecondsNumber of seconds after the container has started before liveness probes are initiated. Minimum value is 0。intfalse0
periodSecondsHow often, in seconds, to execute the probe. Minimum value is 1。intfalse10
timeoutSecondsNumber of seconds after which the probe times out. Minimum value is 1。intfalse1
successThresholdMinimum consecutive successes for the probe to be considered successful after having failed. Minimum value is 1。intfalse1
failureThresholdMinimum consecutive failures for the probe to be considered failed after having succeeded. Minimum value is 1。intfalse3
terminationGracePeriodSecondsOptional duration in seconds the pod needs to terminate gracefully upon probe failure. Set this value longer than the expected cleanup time for your process。intfalse
execInstructions for assessing container startup status by executing a command. Either this attribute or the httpGet attribute or the grpc attribute or the tcpSocket attribute MUST be specified. This attribute is mutually exclusive with the httpGet attribute and the tcpSocket attribute and the gRPC attribute。execfalse
httpGetInstructions for assessing container startup status by executing an HTTP GET request. Either this attribute or the exec attribute or the grpc attribute or the tcpSocket attribute MUST be specified. This attribute is mutually exclusive with the exec attribute and the tcpSocket attribute and the gRPC attribute。httpGetfalse
grpcInstructions for assessing container startup status by probing a gRPC service. Either this attribute or the exec attribute or the grpc attribute or the httpGet attribute MUST be specified. This attribute is mutually exclusive with the exec attribute and the httpGet attribute and the tcpSocket attribute。grpcfalse
tcpSocketInstructions for assessing container startup status by probing a TCP socket. Either this attribute or the exec attribute or the tcpSocket attribute or the httpGet attribute MUST be specified. This attribute is mutually exclusive with the exec attribute and the httpGet attribute and the gRPC attribute。tcpSocketfalse
exec (startup-probe)
名称描述类型是否必须默认值
command容器中执行的命令,命令返回 0 则为正常,否则则为失败。[]stringtrue
httpGet (startup-probe)
名称描述类型是否必须默认值
path定义服务端点请求的路径。stringfalse
portThe port numer to access on the host or container。inttrue
hostThe hostname to connect to, defaults to the pod IP. You probably want to set "Host" in httpHeaders instead。stringfalse
schemeThe Scheme to use for connecting to the host。"HTTP" or "HTTPS"falseHTTP
httpHeadersCustom headers to set in the request. HTTP allows repeated headers。[]httpHeadersfalse
httpHeaders (startup-probe)
名称描述类型是否必须默认值
nameThe header field name。stringtrue
valueThe header field value。stringtrue
grpc (startup-probe)
名称描述类型是否必须默认值
portThe port number of the gRPC service。inttrue
serviceThe name of the service to place in the gRPC HealthCheckRequest。stringfalse
tcpSocket (startup-probe)
名称描述类型是否必须默认值
portNumber or name of the port to access on the container。stringtrue
hostHost name to connect to, defaults to the pod IP。stringfalse

type-option-2 (startup-probe)

名称描述类型是否必须默认值
probesSpecify the startup probe for multiple containers。[]probestrue
probes (startup-probe)
名称描述类型是否必须默认值
containerNameSpecify the name of the target container, if not set, use the component name。stringfalseempty
initialDelaySecondsNumber of seconds after the container has started before liveness probes are initiated. Minimum value is 0。intfalse0
periodSecondsHow often, in seconds, to execute the probe. Minimum value is 1。intfalse10
timeoutSecondsNumber of seconds after which the probe times out. Minimum value is 1。intfalse1
successThresholdMinimum consecutive successes for the probe to be considered successful after having failed. Minimum value is 1。intfalse1
failureThresholdMinimum consecutive failures for the probe to be considered failed after having succeeded. Minimum value is 1。intfalse3
terminationGracePeriodSecondsOptional duration in seconds the pod needs to terminate gracefully upon probe failure. Set this value longer than the expected cleanup time for your process。intfalse
execInstructions for assessing container startup status by executing a command. Either this attribute or the httpGet attribute or the grpc attribute or the tcpSocket attribute MUST be specified. This attribute is mutually exclusive with the httpGet attribute and the tcpSocket attribute and the gRPC attribute。execfalse
httpGetInstructions for assessing container startup status by executing an HTTP GET request. Either this attribute or the exec attribute or the grpc attribute or the tcpSocket attribute MUST be specified. This attribute is mutually exclusive with the exec attribute and the tcpSocket attribute and the gRPC attribute。httpGetfalse
grpcInstructions for assessing container startup status by probing a gRPC service. Either this attribute or the exec attribute or the grpc attribute or the httpGet attribute MUST be specified. This attribute is mutually exclusive with the exec attribute and the httpGet attribute and the tcpSocket attribute。grpcfalse
tcpSocketInstructions for assessing container startup status by probing a TCP socket. Either this attribute or the exec attribute or the tcpSocket attribute or the httpGet attribute MUST be specified. This attribute is mutually exclusive with the exec attribute and the httpGet attribute and the gRPC attribute。tcpSocketfalse
exec (startup-probe)
名称描述类型是否必须默认值
command容器中执行的命令,命令返回 0 则为正常,否则则为失败。[]stringtrue
httpGet (startup-probe)
名称描述类型是否必须默认值
path定义服务端点请求的路径。stringfalse
portThe port numer to access on the host or container。inttrue
hostThe hostname to connect to, defaults to the pod IP. You probably want to set "Host" in httpHeaders instead。stringfalse
schemeThe Scheme to use for connecting to the host。"HTTP" or "HTTPS"falseHTTP
httpHeadersCustom headers to set in the request. HTTP allows repeated headers。[]httpHeadersfalse
httpHeaders (startup-probe)
名称描述类型是否必须默认值
nameThe header field name。stringtrue
valueThe header field value。stringtrue
grpc (startup-probe)
名称描述类型是否必须默认值
portThe port number of the gRPC service。inttrue
serviceThe name of the service to place in the gRPC HealthCheckRequest。stringfalse
tcpSocket (startup-probe)
名称描述类型是否必须默认值
portNumber or name of the port to access on the container。stringtrue
hostHost name to connect to, defaults to the pod IP。stringfalse

Storage

描述

Add storages on K8s pod for your workload which follows the pod spec in path 'spec.template'。

适用于组件类型

基于以下资源的组件:

  • deployments.apps
  • statefulsets.apps
  • daemonsets.apps
  • jobs.batch

示例 (storage)

# sample.yaml
apiVersion: core.oam.dev/v1beta1
kind: Application
metadata:
name: storage-app
spec:
components:
- name: express-server
type: webservice
properties:
image: oamdev/hello-world
ports:
- port: 8000
traits:
- type: storage
properties:
# PVC type storage
pvc:
- name: test1
mountPath: /test/mount/pvc
# EmptyDir type storage
emptyDir:
- name: test1
mountPath: /test/mount/emptydir
# ConfigMap type storage
configMap:
- name: test1
mountPath: /test/mount/cm
# Mount ConfigMap to Env
mountToEnv:
envName: TEST_ENV
configMapKey: key1
data:
key1: value1
key2: value2
# Secret type storage
secret:
- name: test1
mountPath: /test/mount/secret
# Mount Secret to Env
mountToEnv:
envName: TEST_SECRET
secretKey: key1
data:
key1: dmFsdWUx
key2: dmFsdWUy

参数说明 (storage)

名称描述类型是否必须默认值
pvc声明 pvc 类型存储。[]pvcfalse
configMap声明 ConfigMap 类型存储。[]configMapfalse
secret声明 Secret 类型存储。[]secretfalse
emptyDir声明 EmptyDir 类型存储。[]emptyDirfalse
hostPathDeclare host path type storage。[]hostPathfalse

pvc (storage)

名称描述类型是否必须默认值
namestringtrue
mountOnlyboolfalsefalse
mountPathstringtrue
subPathstringfalse
volumeModestringfalseFilesystem
volumeNamestringfalse
accessModes[]stringtrue
storageClassNamestringfalse
resourcesresourcesfalse
dataSourceRefdataSourceReffalse
dataSourcedataSourcefalse
selectorselectorfalse
resources (storage)
名称描述类型是否必须默认值
requestsrequeststrue
limitslimitsfalse
requests (storage)
名称描述类型是否必须默认值
storagestringtrue
limits (storage)
名称描述类型是否必须默认值
storagestringtrue
dataSourceRef (storage)
名称描述类型是否必须默认值
namestringtrue
kindstringtrue
apiGroupstringtrue
dataSource (storage)
名称描述类型是否必须默认值
namestringtrue
kindstringtrue
apiGroupstringtrue
selector (storage)
名称描述类型是否必须默认值
matchLabelsmap[string]stringfalse
matchExpressionsmatchExpressionsfalse
matchExpressions (storage)
名称描述类型是否必须默认值
keystringtrue
values[]stringtrue
operatorstringtrue

configMap (storage)

名称描述类型是否必须默认值
namestringtrue
mountOnlyboolfalsefalse
mountToEnvmountToEnvfalse
mountToEnvs[]mountToEnvsfalse
mountPathstringfalse
subPathstringfalse
defaultModeintfalse420
readOnlyboolfalsefalse
datamap[string]_false
items[]itemsfalse
mountToEnv (storage)
名称描述类型是否必须默认值
envNamestringtrue
configMapKeystringtrue
mountToEnvs (storage)
名称描述类型是否必须默认值
envNamestringtrue
configMapKeystringtrue
items (storage)
名称描述类型是否必须默认值
keystringtrue
pathstringtrue
modeintfalse511

secret (storage)

名称描述类型是否必须默认值
namestringtrue
mountOnlyboolfalsefalse
mountToEnvmountToEnvfalse
mountToEnvs[]mountToEnvsfalse
mountPathstringfalse
subPathstringfalse
defaultModeintfalse420
readOnlyboolfalsefalse
stringDatamap[string]_false
datamap[string]_false
items[]itemsfalse
mountToEnv (storage)
名称描述类型是否必须默认值
envNamestringtrue
secretKeystringtrue
mountToEnvs (storage)
名称描述类型是否必须默认值
envNamestringtrue
secretKeystringtrue
items (storage)
名称描述类型是否必须默认值
keystringtrue
pathstringtrue
modeintfalse511

emptyDir (storage)

名称描述类型是否必须默认值
namestringtrue
mountPathstringtrue
subPathstringfalse
medium"" or "Memory"falseempty

hostPath (storage)

名称描述类型是否必须默认值
namestringtrue
pathstringtrue
mountPathstringtrue
type"Directory" or "DirectoryOrCreate" or "FileOrCreate" or "File" or "Socket" or "CharDevice" or "BlockDevice"falseDirectory

Topologyspreadconstraints

描述

Add topology spread constraints hooks for every container of K8s pod for your workload which follows the pod spec in path 'spec.template'。

适用于组件类型

基于以下资源的组件:

  • deployments.apps
  • statefulsets.apps
  • daemonsets.apps
  • jobs.batch

示例 (topologyspreadconstraints)

apiVersion: core.oam.dev/v1beta1
kind: Application
metadata:
name: application-with-topologyspreadconstraints
spec:
components:
- name: busybox-runner
type: worker
properties:
image: busybox
cmd:
- sleep
- '1000'
traits:
- type: topologyspreadconstraints
properties:
constraints:
- topologyKey: zone
labelSelector:
matchLabels:
zone: us-east-1a
maxSkew: 1
whenUnsatisfiable: DoNotSchedule
minDomains: 1
nodeAffinityPolicy: Ignore
nodeTaintsPolicy: Ignore
- topologyKey: node
labelSelector:
matchExpressions:
- key: foo
operator: In
values:
- abc
maxSkew: 1
whenUnsatisfiable: ScheduleAnyway
minDomains: 1
nodeAffinityPolicy: Ignore
nodeTaintsPolicy: Ignore

参数说明 (topologyspreadconstraints)

名称描述类型是否必须默认值
constraints[]constraintstrue

constraints (topologyspreadconstraints)

名称描述类型是否必须默认值
maxSkewDescribe the degree to which Pods may be unevenly distributed。inttrue
topologyKeySpecify the key of node labels。stringtrue
whenUnsatisfiableIndicate how to deal with a Pod if it doesn't satisfy the spread constraint。"DoNotSchedule" or "ScheduleAnyway"falseDoNotSchedule
labelSelectorlabelSelectortrue
minDomainsIndicate a minimum number of eligible domains。intfalse
matchLabelKeysA list of pod label keys to select the pods over which spreading will be calculated。[]stringfalse
nodeAffinityPolicyIndicate how we will treat Pod's nodeAffinity/nodeSelector when calculating pod topology spread skew。"Honor" or "Ignore"falseHonor
nodeTaintsPolicyIndicate how we will treat node taints when calculating pod topology spread skew。"Honor" or "Ignore"falseHonor
labelSelector (topologyspreadconstraints)
名称描述类型是否必须默认值
matchLabelsmap[string]stringfalse
matchExpressions[]matchExpressionsfalse
matchExpressions (topologyspreadconstraints)
名称描述类型是否必须默认值
keystringtrue
operator"In" or "NotIn" or "Exists" or "DoesNotExist"falseIn
values[]stringfalse